New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Security improvements: Enable branch protection and add SECURITY.md #207

Open

nickossdev opened this issue Jul 17, 2024 · 0 comments

nickossdev commented Jul 17, 2024

Security Improvements Needed

Hey there! I noticed a couple of security gaps in the repo:

No branch protection on 'master'
- OSSF Scorecard flagged this as a warning
- Leaves the main branch vulnerable to unwanted changes
Missing SECURITY.md file
- No clear guidance on handling security issues
- Makes it tough for people to report vulnerabilities properly

Suggestions:

Enable branch protection for 'master' (PR reviews, status checks, etc.)
Add a SECURITY.md with basics like:
- How to report issues
- Response timeframes
- Supported versions

Happy to provide more details if needed.

Thanks for considering!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment